Malicious code in selfvirtualhttpget (PyPI)
Summary
MAL-2023-6756: Malicious code in selfvirtualhttpget (PyPI). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The selfvirtualhttpget package is an open-source Python package available on PyPI. It is designed to provide functionality for performing virtual HTTP GET requests. The package allows developers to simulate HTTP GET requests without actually sending them over the network. This can be useful for testing and debugging purposes. However, the package has been found to contain malicious code, which poses a significant security risk to users who install and use it.
Vulnerability Detail
The selfvirtualhttpget package has been identified as part of a larger group of nearly 6000 malicious PyPi and NPM packages published by the EsqueleSquad group. These packages execute spyware and information-stealing malware. The specific vulnerability in selfvirtualhttpget allows an attacker to execute arbitrary code on the user's system, potentially leading to unauthorized access, data theft, or other malicious activities. The malicious code is present in all versions of the package.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall selfvirtualhttpgetIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to remove the selfvirtualhttpget package from your environment to mitigate the risk.
Conclusion
The selfvirtualhttpget package on PyPI has been found to contain malicious code, posing a significant security risk to users. It is recommended to uninstall the package and regularly review and update the packages used in your projects. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for selfvirtualhttpget →
FAQ
selfvirtualhttpget is a Python package that allows developers to simulate HTTP GET requests without actually sending them over the network.
The vulnerability in selfvirtualhttpget allows an attacker to execute arbitrary code on the user's system, potentially leading to unauthorized access, data theft, or other malicious activities.
This vulnerability was discovered by Checkmarx, a company specializing in software security.
Yes, all versions of the selfvirtualhttpget package are affected by this vulnerability.
To protect your software from similar vulnerabilities, it is crucial to regularly update and review the packages used in your projects. Consider using a package vulnerability monitoring tool like Vulert to receive real-time alerts for open-source vulnerabilities.
